CVE-2010-5334 | BDVDB-2026-124244 Detail

Description#

IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (_c to basic/index.html) is not properly sanitised and can therefore be exploited to browse the partition where IceWarp is installed (or the whole system) and read arbitrary files.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12019-10-11Record published in the CVE List.
2. Version 22024-08-07Most recent update recorded in the CVE List.